February 15, 2022

Vulnerable Exchange server hit by Squirrelwaffle and financial fraud

While Squirrelwaffle leveraged Exchange to spread malspam through hijacked email threads, one thread was spirited away by attackers to trick the target into a money transfer

Security Operations

March 04, 2020

Trickbot campaign targets Coronavirus fears in Italy

SophosLabs UncutThreat Research

July 11, 2019

‘Oto Gonderici’ Excel formula injections target Turkish victims

A criminal relentlessly attacks Turkish targets with a novel maldoc trick, mostly staying under the radar

SophosLabs UncutThreat Research

March 05, 2019

GandCrab 101: All about the most widely distributed ransomware of the moment

In this Sophos101 report, we'll give you the lowdown on what you need to know about this, unfortunately, widely disseminated malware.

SophosLabs UncutThreat Research

March 05, 2019

Emotet 101, stage 5: a delivery vehicle for more malware

SophosLabs UncutThreat Research

March 05, 2019

Emotet 101, stage 4: command and control

SophosLabs UncutThreat Research

March 05, 2019

Emotet 101, stage 3: The Emotet executable

SophosLabs UncutThreat Research

March 05, 2019

Emotet 101, stage 2: The malicious attachment and killchain

SophosLabs UncutThreat Research

March 05, 2019

Emotet 101, stage 1: The spam lure

SophosLabs UncutThreat Research